Hi,

somewhat related to the question, and just in case anyone is interested,
maven can be configured to generate the
.asc and .sha512 files for all the build artifacts. At JSPWiki, we
overwrite the checksum maven plugin configuration
from the ASF parent pom to do this [#1]. When copying the release artifacts
to dist.a.o we also copy these files
over too, f.ex any subdirectory under [#2]. This makes [#3] a piece of cake
:-)


best regards,
juan pablo

[#1]: https://github.com/apache/jspwiki/blob/master/pom.xml#L610-L626
[#2]: https://dist.apache.org/repos/dist/release/jspwiki
[#3]: https://www.apache.org/dev/release-distribution#sigs-and-sums

On Thu, Jan 23, 2020 at 9:19 AM Bertrand Delacretaz <
bdelacre...@codeconsult.ch> wrote:

> On Fri, Jan 17, 2020 at 9:51 PM leerho <lee...@gmail.com> wrote:
> > ...either the Maven deploy plugin or the repository always adds
> > MD5 and SHA1 signatures as well...
>
> FWIW, we'd like to stop using MD5 but I don't think we're there yet,
> the following URLs have more info:
>
> http://www.apache.org/dev/release-distribution
> https://issues.apache.org/jira/browse/INFRA-14923
> https://issues.sonatype.org/browse/NEXUS-21802
>
> -Bertrand
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
>

Reply via email to